Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d517b1db-f329-416d-b595-1db5fb91147d.roa
File: d517b1db-f329-416d-b595-1db5fb91147d.roa (raw, json)
Hash identifier: JvQP/Ks6vkJoxYrbcgdJLxvqxH+advgX4VsTS8pWrz0=
Subject key identifier: C6:3D:28:94:5D:5D:86:1F:ED:77:82:4E:92:9A:B7:5E:FD:C2:55:32
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B5BF31EAFC2E1CF5B591A79188A198F8E3EB7ED
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d517b1db-f329-416d-b595-1db5fb91147d.roa
Signing time: Wed 18 Oct 2023 00:00:00 +0000
ROA not before: Wed 18 Oct 2023 00:00:00 +0000
ROA not after: Wed 22 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5b:f3:1e:af:c2:e1:cf:5b:59:1a:79:18:8a:19:8f:8e:3e:b7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 18 00:00:00 2023 GMT
Not After : Nov 22 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:c9:dc:c5:39:0c:a4:c7:40:ac:7a:98:33:
9a:f6:d5:fd:38:88:06:16:cd:0e:4e:fb:20:d3:e2:
62:9b:a2:11:df:f9:cb:b0:5a:e3:7d:ef:15:61:79:
3c:d6:90:4e:c6:ba:3a:9a:79:9a:d6:b0:e3:fe:5a:
18:19:46:d0:a6:38:59:d4:67:d5:db:9a:e7:da:96:
bb:5e:e5:4d:59:5f:a8:9e:f8:0e:41:6c:42:24:9d:
dc:e5:e7:5d:0d:c0:7f:33:01:04:f4:57:af:39:62:
0d:21:be:20:33:cd:05:fa:d1:4b:83:c7:5a:ee:90:
bc:c8:ef:2a:3f:46:e8:76:03:11:dc:c7:7e:e1:4d:
8a:b9:74:2a:73:49:25:55:56:d3:89:98:af:fb:0d:
0d:3f:99:26:45:29:1e:4c:f5:73:ff:5f:ff:18:1e:
b5:c5:e5:48:fe:af:01:48:09:4e:b3:2b:35:1a:8d:
e7:e0:6b:6f:72:0d:7c:26:5a:f8:8e:d3:ac:65:68:
26:1d:8c:7b:aa:4f:2e:03:7e:48:42:9c:31:07:6f:
d2:3c:97:73:37:a6:8f:5e:aa:9a:33:98:56:2d:16:
39:69:71:59:dc:86:36:3d:5f:13:1b:15:92:e9:d7:
ff:f0:13:aa:90:99:73:d4:d0:3f:24:fd:72:67:f1:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3D:28:94:5D:5D:86:1F:ED:77:82:4E:92:9A:B7:5E:FD:C2:55:32
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d517b1db-f329-416d-b595-1db5fb91147d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1f:d5:fc:b8:e5:8d:33:31:79:58:c7:04:4d:0e:16:14:25:
38:7f:b7:bf:01:27:81:48:8e:4d:9a:ae:de:30:0f:1c:8f:91:
4e:01:8f:4d:44:71:31:5a:b8:1e:4f:38:0c:87:79:1b:df:1e:
78:1d:2a:e9:68:50:6a:22:bc:b0:31:e2:be:17:cd:9d:b5:4e:
90:41:b9:3d:da:eb:da:f2:f2:16:7d:1a:fb:9f:35:d0:b9:58:
00:48:67:cd:32:88:47:cd:b2:f9:48:25:0d:8c:9d:a4:37:7b:
20:a3:c9:88:58:91:83:e3:99:6d:20:39:75:5f:5c:73:64:f0:
d3:38:4c:d2:1c:78:4d:46:2a:62:0a:e6:b4:8a:ba:52:40:ab:
bb:a0:33:c9:cf:00:08:13:a5:02:4b:7b:20:2e:f4:e7:eb:ee:
34:96:62:bd:85:c3:5c:74:0c:25:d2:35:20:e6:7a:14:9a:ac:
d8:f1:f3:11:43:ba:2c:c1:fd:6f:c4:5d:9c:b3:47:6c:6e:39:
60:f8:3e:8d:be:60:03:60:fc:82:bf:dc:e4:b7:56:66:70:f7:
02:f5:76:91:1f:e8:e4:57:b5:79:4f:a3:2d:8d:03:bd:ec:44:
41:44:47:91:f1:cc:61:f0:4b:50:58:dd:d3:a3:6a:2e:ae:7d:
71:75:c8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:53 2025 by rpki-client